138.199.56.247

Basic Info

City: Prague

Region: Prague - the Capital (Praha - hlavni mesto)

Country: Czechia

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackproxy	Bad IP	2024-10-04 17:32:16

Comments on same subnet:

IP	Type	Details	Datetime
138.199.56.235	attack	Bad IP: Forum Spammer	2024-10-07 13:02:22
138.199.56.240	botsattackproxy	Bad IP: Web Form Spammer	2024-10-04 12:58:21
138.199.56.227	spambotsattack	Bad IP: Forum Spammer	2024-08-29 16:03:16

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 138.199.56.247
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 27905
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;138.199.56.247.			IN	A

;; AUTHORITY SECTION:
.			26	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2024100400 1800 900 604800 86400

;; Query time: 39 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Fri Oct 04 17:32:14 CST 2024
;; MSG SIZE  rcvd: 107

Host info

Host 247.56.199.138.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

** server can't find 247.56.199.138.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
212.237.1.50	attack	May 26 17:52:47 abendstille sshd\[14842\]: Invalid user Sweex from 212.237.1.50 May 26 17:52:47 abendstille sshd\[14842\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.1.50 May 26 17:52:50 abendstille sshd\[14842\]: Failed password for invalid user Sweex from 212.237.1.50 port 43655 ssh2 May 26 17:55:47 abendstille sshd\[17897\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.237.1.50 user=root May 26 17:55:49 abendstille sshd\[17897\]: Failed password for root from 212.237.1.50 port 40728 ssh2 ...	2020-05-27 01:36:32
121.171.166.170	attack	2020-05-26T15:51:45.941442abusebot-2.cloudsearch.cf sshd[3961]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.171.166.170 user=root 2020-05-26T15:51:47.525718abusebot-2.cloudsearch.cf sshd[3961]: Failed password for root from 121.171.166.170 port 41304 ssh2 2020-05-26T15:54:25.928599abusebot-2.cloudsearch.cf sshd[4025]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.171.166.170 user=root 2020-05-26T15:54:27.477779abusebot-2.cloudsearch.cf sshd[4025]: Failed password for root from 121.171.166.170 port 37896 ssh2 2020-05-26T15:56:22.327611abusebot-2.cloudsearch.cf sshd[4029]: Invalid user cesarc from 121.171.166.170 port 56142 2020-05-26T15:56:22.333214abusebot-2.cloudsearch.cf sshd[4029]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.171.166.170 2020-05-26T15:56:22.327611abusebot-2.cloudsearch.cf sshd[4029]: Invalid user cesarc from 121.171.166.170 p ...	2020-05-27 01:14:54
45.55.72.69	attackbotsspam	Fail2Ban - SSH Bruteforce Attempt	2020-05-27 01:25:28
103.231.91.136	attack	Several different exploit attempts. Using known exploits, sends a shotgun blast of attacks hoping one will work.	2020-05-27 01:21:57
187.217.199.20	attackbots	May 26 18:28:07 vps647732 sshd[26129]: Failed password for root from 187.217.199.20 port 47460 ssh2 ...	2020-05-27 01:05:14
37.139.16.229	attack	Invalid user snook from 37.139.16.229 port 56903	2020-05-27 01:07:54
123.206.23.106	attack	Invalid user user from 123.206.23.106 port 36124	2020-05-27 01:14:31
212.5.152.196	attackbots	May 26 19:56:36 ift sshd\[17801\]: Failed password for backup from 212.5.152.196 port 37073 ssh2May 26 19:58:28 ift sshd\[17925\]: Invalid user test from 212.5.152.196May 26 19:58:31 ift sshd\[17925\]: Failed password for invalid user test from 212.5.152.196 port 53033 ssh2May 26 20:00:25 ift sshd\[18611\]: Failed password for root from 212.5.152.196 port 40758 ssh2May 26 20:02:21 ift sshd\[18765\]: Failed password for root from 212.5.152.196 port 56712 ssh2 ...	2020-05-27 01:31:37
45.134.179.57	attackspam	May 26 19:03:17 debian-2gb-nbg1-2 kernel: \[12771395.914175\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.134.179.57 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=10368 PROTO=TCP SPT=44651 DPT=5642 WINDOW=1024 RES=0x00 SYN URGP=0	2020-05-27 01:04:47
115.134.128.90	attackbots	May 26 22:47:18 itv-usvr-01 sshd[19322]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.134.128.90 user=root May 26 22:47:21 itv-usvr-01 sshd[19322]: Failed password for root from 115.134.128.90 port 44894 ssh2 May 26 22:54:52 itv-usvr-01 sshd[19584]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.134.128.90 user=root May 26 22:54:54 itv-usvr-01 sshd[19584]: Failed password for root from 115.134.128.90 port 39702 ssh2 May 26 22:56:48 itv-usvr-01 sshd[19644]: Invalid user zumbusch from 115.134.128.90	2020-05-27 00:58:40
76.169.171.13	attackspam	20 attempts against mh-ssh on solar	2020-05-27 01:19:40
94.102.52.44	attackspam	May 26 18:59:50 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:00:07 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session=<0DPwBpCmxk5eZjQs> May 26 19:00:19 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:01:43 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=94.102.52.44, lip=185.118.198.210, session= May 26 19:02:11 web01.agentur-b-2.de dovecot: pop3-login: Aborted login (auth failed, 1 attempts in 2 secs): user=	2020-05-27 01:15:11
189.109.49.138	attack	20/5/26@11:55:58: FAIL: Alarm-Network address from=189.109.49.138 20/5/26@11:55:58: FAIL: Alarm-Network address from=189.109.49.138 ...	2020-05-27 01:28:29
159.65.255.153	attack	(sshd) Failed SSH login from 159.65.255.153 (US/United States/-): 5 in the last 3600 secs	2020-05-27 01:10:53
142.93.6.190	attackbotsspam	SSH authentication failure x 6 reported by Fail2Ban ...	2020-05-27 01:01:02

Recently Reported IPs

30.145.125.195	201.246.99.106	40.113.122.9	53.95.149.155
210.211.42.141	113.15.98.76	113.150.215.195	113.150.221.44
113.150.55.86	113.151.181.230	113.151.161.116	113.15.96.123
113.151.106.21	113.151.39.97	113.152.102.190	113.150.37.6
113.151.73.165	113.152.157.214	113.151.254.75	113.151.209.217